Okta Unveils 'Identity Security Fabric' to Protect AI Agents

Okta has announced a new Identity Security Fabric, a unified framework designed to secure AI agents across enterprise systems. With this launch, the company aims to replace the typical patchwork of identity tools that struggle to keep up with AI-driven threats.

Introduced at Oktane, the company's annual conference in Las Vegas, the platform responds to growing security risks posed by AI agents that operate with elevated access and minimal oversight.

“As part of the fabric, organisations will also be able to issue and verify tamper-proof digital credentials, helping establish trust and address rising AI-powered fraud,” Okta said in a statement.

According to Okta, while 91% of organisations already use AI agents, only 10% have strategies to manage these non-human identities. The company pointed to a notable incident where “an AI hiring bot … exposed millions of applicants’ data to hackers who tried the password ‘123456’.”

“AI is changing the workplace faster than organisations can adapt. We’re starting to see poorly built, deployed, or managed agents expose the risks of using a traditional patchwork of identity solutions. The modern enterprise requires an identity security fabric that can unify silos and reduce the attack surface.

"Our latest innovations weave agents into that fabric to manage their entire identity lifecycle, leveraging open standards like Cross App Access that help elevate the entire industry and create a more secure AI-powered ecosystem,” Kristen Swanson, SVP of Design and Research, Okta, said.

Okta’s fabric is built around three core components: AI agent lifecycle management; Cross App Access (XAA), an OAuth extension to manage interactions between agents and applications; and verifiable digital credentials, allowing organisations to issue cryptographically secured identities.

"As our customers scale their use of agentic AI, providing a secure and trusted platform is our top priority,” said Marla Hay, SVP, Product, Salesforce. “We're excited to see the continued investment into securing agentic workflows with XAA and to work together to bring Okta's valuable identity insights into Salesforce Security Center, helping shared customers manage their security posture with greater confidence."

AI agent lifecycle management, branded Okta for AI Agents, is slated for early access in the first quarter of fiscal 2027.